Wednesday, 22 February 2012

CISCO: IT Security Education Not Good Enough

Cisco has released a report which claims that there is a “startling” lack of concern for IT security amongst young professionals. Cisco has stated that there is a need for better and more forceful education on the subject.

The Connected World Technology report says that 7 out of 10 young employees often ignore IT policies.

More than half of the young professionals surveyed admitted that they had allowed others to use their computer without them supervising it, 9% admitted to having used a stranger’s mobile device, while 19% said that they used free wireless hotspots.

60% of young employees feel that IT security wasn’t their responsibility.

To correct this, the report recommends technology controls tools like intrusion prevention systems, along with employee training that educates them of the company’s expectations for appropriate behaviour and security practices.

David Evans, chief futurist for Cisco says: “Assess user education practices. Long seminars and handbooks aren’t effective. Younger employees will be more receptive to a targeted approach to user education, with shorter sessions and ‘just-in-time’ training. Peer training also works well in today’s collaborative work environment.”